CVE-2007-6309

webSPELL 4.1.2 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in webSPELL 4.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) the galleryID parameter in a usergallery upload action; or the (2) upID, (3) tag, (4) month, (5) userID, or (6) year parameter in a calendar announce action.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Brainhead · textwebappsphp

https://www.exploit-db.com/exploits/30857

View Code ZIP pw:eip

exploitdb WRITEUP VERIFIED

by Brainhead · textwebappsphp

https://www.exploit-db.com/exploits/30858

View Code ZIP pw:eip

References (6)

[Exploit] http://www.securityfocus.com/bid/26787

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/38955

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/38957

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/484795/100/0/threaded

[Third Party Advisory] http://secunia.com/advisories/28006

[Third Party Advisory] http://securityreason.com/securityalert/3429

Scores

EPSS 0.0719

EPSS Percentile 91.5%

Classification

CWE

CWE-79

Status draft

Affected Products (1)

webspell/webspell

Timeline

Published Dec 11, 2007

Tracked Since Feb 18, 2026